latitude-cli

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the platform-specific CLI binary from the official GitHub repository latitude-dev/latitude-llm using standard tools like curl or the GitHub CLI (gh). These sources are well-known and consistent with the skill's authorship.
  • [COMMAND_EXECUTION]: The installation process utilizes standard shell commands (tar, chmod, mv) to manage the downloaded binary. On macOS, it includes instructions to use xattr to clear the quarantine flag, which is a common requirement for third-party developer tools.
  • [CREDENTIALS_UNSAFE]: The skill provides detailed guidance on the secure handling of the LATITUDE_API_KEY. It encourages the use of .env files, environment variables, and OS keyrings while explicitly warning against printing secrets in chat logs or shell transcripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 03:32 PM
Security Audit — agent-trust-hub — latitude-cli